2024年医疗保健行业网络安全调查.docx

1

1

2024HIMSSHealthcareCybersecuritySurvey|?2025HealthcareInformationandManagementSystemsSociety

2024HIMSSHealthcareCybersecuritySurvey

TableofContents

ExecutiveSummary 3

MethodologyandDemographics 4

Methodology 4

Demographics 4

LevelsofResponsibility 5

TypesofOrganizationsRepresented 5

EconomicsofHealthcareCybersecurity 6

BudgetsareImproving 6

OverallITBudgetsareModestlyImproving 6

AllocationofcurrentITbudgettocybersecurity 7

Comparing2023to2024:CybersecurityBudgetAllocations 8

TrendsinCybersecurityBudgetAllocations 9

CybersecurityBudgetsProjectedtoRise 10

Changestocybersecuritybudgetin2025 10

EffectofCybersecurityBudgetIncreasesin2025 11

SecurityAwareness 12

SecurityAwarenessPrograms 12

Effectivenessofsecurityawarenessprograms 13

SecurityIncidents 14

SignificantSecurityIncidents 14

InitialPointsofCompromise 14

TestingofIncidentResponsePlans 15

StakeholderParticipationinTabletopExercises 16

What’sHappeningwithRansomware 17

PresentState 17

2024RansomwareTrends 17

RansomwareTrends:2022-2024 18

ToPayorNottoPay–RansomwarePayments 19

Proactivevs.ReactiveSecurityMeasures 20

FutureState 21

AIAdoptioninHealthcare 22

AllowingtheUseofAIinHealthcare 22

2

2

2024HIMSSHealthcareCybersecuritySurvey|?2025HealthcareInformationandManagementSystemsSociety

ToGovernorNot:OrganizationalApproachestoAI 22

AITechnologyUseCases 23

AIGuardrails 24

ApprovalProcessforAITechnology 24

ActiveMonitoringofAITechnology 25

AcceptableUsePolicyforAITechnology 25

FutureConcernsRegardingAI 26

ManagingThird-PartyRisks 27

Third-PartyRiskManagementPrograms 27

Third-PartySecurityIncidents 28

ImpactsofThird-PartySecurityIncidents 29

InsiderThreatPrograms 30

FormalInsiderThreatPrograms 30

InsiderThreatandAI 31